Bug 616506
| Summary: | SELinux policy needs to be updated for telepathy/Empathy to work | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Matthew Booth <mbooth> | ||||||
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | high | Docs Contact: | |||||||
| Priority: | low | ||||||||
| Version: | 13 | CC: | anjos.nuno, bdpepple, bfrechette, bobkaiser1, dougmpx, dwalsh, dzrudy, fhauva, jan.teichmann, jerome.benoit, johnmargaritopoulos, juniorroy, kaj, lieutenant45, livermob, mail, mgrepl, obalyuk87, pbrobinson, peter, pratyush.a.sahay, rodrigoatique, sanjay.ankur, sjensen, stephane.maniaci, theophanis_kontogiannis, tomek, wesley.massuda | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | All | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | selinux-policy-3.7.19-39.fc13 | Doc Type: | Bug Fix | ||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2010-07-23 02:27:17 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
|
Description
Matthew Booth
2010-07-20 16:25:24 UTC
Looking at your error msg it looks like tp-mission-control is failing to get your passwords from gnome-keyring, which in turn is causing the login to the appropriate connection manager to fail. I'm going to re-assign this to tp-mission-control since it looks like the problem lies there, and see if I can reproduce this locally to get some more info. fwiw, I saw similar symptoms (in the debugger) trying and failing to use empathy to setup a google-talk account for the first time today. I'd get to the end of the new account wizard, click "accept", and nothing... Created attachment 433395 [details]
yum.log of transaction which apparently resulted in empathy failure
I've attached the yum.log showing all packages I updated between empathy working and not working. It was unfortunately quite a large transaction.
Created attachment 433402 [details]
transaction that apparently broke empathy
I have the same problems. The account wizard behaves strangely, no icon shows up in the notification and I can't connect with any existing account (they don't show up anyway).
I have attached the relevant portions of the yum.log file. The only common packaged (comparing to Matthews log file) that are related (as far as I can tell) to telepathy (or empathy, that is) are telepathy-butterfly and farsight.
This bug is apparently being caused by selinux. According to D. Walsh, running this should fix it: chcon -t bin_t /usr/libexec/mission-control* /usr/libexec/telepathy* hi, Experienced the same thing. The above solution fixed it (apparently) Ankur comment #5 fix confirmed mmm, mmm, good. fix confirmed here too. Should we move this to selinux-policy? (In reply to comment #8) > fix confirmed here too. Should we move this to selinux-policy? Yeah, probably should. Yes this is an SELinux issue. Fixed in selinux-policy-3.7.19-39.fc13 selinux-policy-3.7.19-39.fc13 has been submitted as an update for Fedora 13. http://admin.fedoraproject.org/updates/selinux-policy-3.7.19-39.fc13 *** Bug 616844 has been marked as a duplicate of this bug. *** *** Bug 616662 has been marked as a duplicate of this bug. *** *** Bug 616747 has been marked as a duplicate of this bug. *** *** Bug 614991 has been marked as a duplicate of this bug. *** *** Bug 615749 has been marked as a duplicate of this bug. *** *** Bug 616936 has been marked as a duplicate of this bug. *** Hi, I'm just wondering one thing - how come I was affected by this selinux issue when I have selinux set to permissive mode? Shouldn't it be just logged by the setrobleshooter and keep empathy running? Is selinux still blocking some stuff even when in permissive mode? Regards Package: telepathy-mission-control-1:5.4.3-1.fc13 Architecture: x86_64 OS Release: Fedora release 13 (Goddard) How to reproduce ----- 1. Hava a jabber account configured in empthy- 2. Update to telepathy-mission-control-1:5.4.3-1.fc13 (and related packages of the same update time). 3. Log in. 4. Note there is a crash report and no way to get jabber connectivity. Comment ----- I ran the fedora 13 update as of 2010-07-21, after that all attempts to start empathy fails. Sorry for lack of details here, I'll be happy to test run any suggestions and send in further details. I tried to "setenforce 0", log out, log in, and I do get the same problem in selinux permissive mode. Comment #5 works for me to -- even though running in permissive mode didn't help. Strange? Package: telepathy-mission-control-1:5.4.3-1.fc13 Architecture: x86_64 OS Release: Fedora release 13 (Goddard) How to reproduce ----- 1.Start Empathy 2.Get segfault on mission-control; icon disappears in system tray 3.Empathy contact list stays open. Comment ----- First time, the system tray icon stayed for awhile, then crashed. After that, it would seg fault as soon as Empathy was started. Package: telepathy-mission-control-1:5.4.3-1.fc13 Architecture: i686 OS Release: Fedora release 13 (Goddard) How to reproduce ----- 1.start empathy 2. 3. Package: telepathy-mission-control-1:5.4.3-1.fc13 Architecture: x86_64 OS Release: Fedora release 13 (Goddard) Comment ----- Just loged into my account Package: telepathy-mission-control-1:5.4.3-1.fc13 Architecture: x86_64 OS Release: Fedora release 13 (Goddard) Comment ----- Edit --> Accounts and it crashed
That sounds like a bug in dbus, not following permissive mode.
The problem that leaked into F13 was an update to telepathy policy for confined
users.
A confined users starts telepathy/empathy through dbus session bus. For
unconfined_t we want to stay unconfined_t, but for staff_t we want to run in a
confined mode. The problem was transition was partially happening for
unconfined_t, but the policy was not complete and dbus was refusing to
transition to telepathy/empathy types. When dbus sees the failure to
transition it is supposed to check whether the system is in permissive mode and
continue.
By changing the labels on the executables to bin_t, the transition is no longer
attempted.
We will attempt to turn the complete policy on in Rawhide, and see if we can
run a secure telepathy/empathy from unconfined_t.
yum update --enablerepo=updates-testing selinux-policy And update karma if this fixes the problem. *** Bug 617213 has been marked as a duplicate of this bug. *** *** Bug 617216 has been marked as a duplicate of this bug. *** *** Bug 617132 has been marked as a duplicate of this bug. *** Package: telepathy-mission-control-1:5.4.3-1.fc13 Architecture: x86_64 OS Release: Fedora release 13 (Goddard) How to reproduce ----- 1.just connecting empathy 2. can't connect IM 3. Comment ----- it's gotten worse! sorry got it working by doing: chcon -t bin_t /usr/libexec/mission-control* /usr/libexec/telepathy* *** Bug 617295 has been marked as a duplicate of this bug. *** Package: telepathy-mission-control-1:5.4.3-1.fc13 Architecture: x86_64 OS Release: Fedora release 13 (Goddard) How to reproduce ----- 1. Update all packages. 2. Make SELinux permissible. 3. Try to run "buggy" Empathy Account Wizard (System->Preferences->Messaging and VOIP Accounts). Comment ----- First of all. I just installed Fedora 13 and updated it completely. When I tried to use Empathy Wizard I was unable to complete the configuration of my MSN account. Empathy debug, Help Contents and the edit->accounts windows where not showing on Empathy. The Help one is giving the error "Unable to open URI Failed to fork (Cannot allocate memory)". Then I changed SELinux to permissible and tried to open the Messaging and VOIP Accounts again giving me this error. (In reply to comment #34) > ----- > First of all. I just installed Fedora 13 and updated it completely. > > When I tried to use Empathy Wizard I was unable to complete the configuration > of my MSN account. Empathy debug, Help Contents and the edit->accounts windows > where not showing on Empathy. The Help one is giving the error "Unable to open > URI Failed to fork (Cannot allocate memory)". > > Then I changed SELinux to permissible and tried to open the Messaging and VOIP > Accounts again giving me this error. Did you grab the updates selinux-policy in bodhi? If not, please read the earlier comments in this bug. The chcon -t bin_t /usr/libexec/mission-control* /usr/libexec/telepathy* also worked for me. Thanks selinux-policy-3.7.19-39.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report. *** Bug 617650 has been marked as a duplicate of this bug. *** *** Bug 617737 has been marked as a duplicate of this bug. *** *** Bug 617859 has been marked as a duplicate of this bug. *** *** Bug 617806 has been marked as a duplicate of this bug. *** *** Bug 617925 has been marked as a duplicate of this bug. *** *** Bug 618113 has been marked as a duplicate of this bug. *** *** Bug 618352 has been marked as a duplicate of this bug. *** |